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AMENDMENTS TO THE CLAIMS 

This listing of claims wUl replace all prior versions and listings of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (currently amended): A method for retrieving data from classified table elements 
having a data processing system comprising a database, the database comprising classified table 
elements stored on a computer-readable medium, the data processing system external to a 
classification engine adapted to provide indicators of approval or non-approval to permit, for a 
request associated with a requester, access to contents of the classified table elements, the 
method comprising: 

receiving the request directly at the database, from the requestor, to access the contents of 
the classified table elements; for each classified table element, the database asking the 
classification engine to provide an indication of whether the requestor associated with the request 
is to be permitted access to the contents of the respective classified table element; and 

accessing the contents of each classified table element for which an approval indicator is 
received from the classification engine, the approval indicator indicating that the requester is 
permitted to access the contents of the respective classified table element; wherein the asking 
step comprises sending, by the database, arguments to input classification parameters to the 
classification engine coupled to the data processing system; 

wherein a decision cache is checked to determine whether one of the indicators of 
approval or non-approval was returned for a same set of arguments for relevant classification 
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parameters, and tlie external classification engine is not called if the determined indicator is 
already contained in the decision cache . 

2. (original): The method of claim 1, further comprising the steps of: providing, to the 
requester, access to the contents of each classified table element for which an approval indicator 
is received; and, denying, to the requester, access to the contents of each classified table element 
for which a non-approval indicator is received from the classification engine, the non-approval 
indicator indicating that the requester is not permitted to access the contents of the respective 
classified table element. 

3. (original): The method of claim 1, wherein: the classified table elements are included 
in a classified table contained in the database; each classified table element is associated with a 
respective classification label; and the classification engine uses the classification label for each 
classified table element and a classification associated with the requestor in determining whetiier 
to provide the approval indicator and whether to provide the non-approval indicator for the 
respective classified table element. 

4. (original): The method of claim 3, wherein the classified table element is a classified 
table row. 

5. (original): The method of claim 4, further comprising the step of compiling the request 
received at the receiving step into a plurality of executable instructions, the executable 
instiiictions comprising added instructions for invoking the classification engine such that for 
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each row of the classified table, arguments for at least one classification parameter are passed to 
the classification engine for use in generating one of the approval indicator and non-approval 

indicator for the respective row, where the arguments comprise both data stored in one or more 
classification columns of the table and data used to determine the classification associated with 
the requester. 

6. (original): The method of claim 5, wherein the classification engine is adapted to 
generate the indicators using a classification level derived by the classification engine for each 
row, the classification level being derived firom data stored in the at least one classification 
column of each respective row in accordance with a column mapping scheme. 

7. (original): The method of claim 1, wherein in the asking step, the classification engine 
is invoked through at least one processing exit in the data processing system. 

8. (currently amended): The method of claim 1, fiirther comprising, before the asking 
step, the step of checking, for each classified table element, whether ar-the decision cache 
contains one of aa-the approval indicator and non-approval indicator associated therewith, and 
wherein the asking step is performed only when neither indicator is contained in said decision 
cache. 

9. (currently amended): A data processing system having a database, the database 
comprising classified table elements stored on a computer-readable medium, the data processing 
system external to a classification engine adapted to provide indicators of approval or non- 
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approval to permit, for a request associated with a requestor, access to contents of the classified 
table elements, the data processing system comprising one or more modules programmed to 

perform the steps of: 

receiving the request directly at the database, from the requester, to access the contents of 
the classified table elements; for each classified table element, the database asking the 
classification engine to provide an indication of whether the requestor associated with the request 
is to be permitted access to the contents of the respective classified table element; and 

accessing the contents of each classified table element for which an approval indicator is 
received from the classification engine, the approval indicator indicating that the requestor is 
permitted to access the contents of the respective classified table element; wherein the asking 
step comprises sending, by the database, arguments to input classification parameters to the 
classification engine coupled to the data processing system; 

wherein a decision cache is checked to determme whether one of the indicators of 
a pproval or non-approval was returned for a same set of arguments for relevant classification 
parameters, and the external classification engine is not called if the determined indicator is 
already contained in tihe decision cache . 

10. (original): The data processing system of claim 9, wherein the one or more modules 
are fiirtiier programmed to perform the steps of: providing, to the requestor, access to the 
contents of each classified table element for which an approval indicator is received; and, 
denying, to the requester, the copy of the accessed contents of each classified table element for 
which a non-approval indicator is received from the classification engine, the non-approval 
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indicator indicating that the requestor is not permitted to access the contents of the respective 
classified table element. 

1 1 . (original): The data processing system of claim 9, wherein: the classified table 
elements are included in a classified table contained in the database; each classified table element 
is associated with a respective classification label; and the classification engine uses the 
classification label for each classified table element and a classification associated with the 
requestor in determining whether to provide the approval indicator and whether to provide the 
non-approval indicator for the respective classified table element. 

12. (original): The data processing system of claim 11, wherein the classified table 
element is a classified table row. 

13. (original): The data processing system of claim 12, wherein the one or more modules 
are fiorther programmed to perform tiie step of compiling the request received at the receiving 
step into a plurality of executable instructions, the executable instructions comprising added 
instructions for invoking the classification engine such that for each row of the classified table, 
arguments for at least one classification parameter are passed to the classification engine for use 
in generating one of the approval indicator and non-approval indicator for the respective row, 
where the arguments comprise both data stored in one or more classification columns and data 
used to determine the classification associated with the requestor. 
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14. (original): The data processing system of claim 12, wherein the classification engine 
is adapted to generate the indicators using a classification level derived by the classification 

engine for each row, the classification level being derived from data stored in the at least one 
classification column of each respective row in accordance with a column mapping scheme. 

15. (original): The data processing system of claim 9, wherein in the asking step, the 
classification engine is invoked through at least one processing exit in the data processing 
system, 

16. (currently amended): The data processing system of claim 9, wherein the one or more 
modules are further programmed to perform, before the asking step, the step of checking, for 
each classified table element, whether a-the decision cache contains one of a^-the approval 
indicator and non-approval indicator associated therewith, and wherein the asking step is 
performed only when neither indicator is contained in said decision cache. 

17. (currently amended): A computer-readable storage medium storing a program which 
causes a data processing system comprising a database to implement functions of retrieving data 
fi-om classified table elements, the database comprising the classified table elements, the data 
processing system external to a classification engine adapted to provide indicators of approval or 
non-approval to permit, for a request associated with a requestor, access to contents of the 
classified table elements, said functions comprising: 

receiving the request directly at the database, fi'om the requestor, to access the contents of 
tihe classified table elements; for each classified table element, the database asking the 
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classification engine to provide an indication of whether the requestor associated with the request 
is to be permitted access to the contents of the respective classified table element; and 

accessing the contents of each classified table element for which an approval indicator is 
received from the classification engine, the approval indicator indicating that the requestor is 
permitted to access the contents of the respective classified table element; wherein the asking 
step comprises sending, by the database, arguments to input classification parameters to the 
classification engine coupled to the data processing system; 

wherein a decision cache is checked to determine whether one of the indicators of 
approval or non-approval was returned for a same set of arguments for relevant classification 
parameters, and tlie external classification engine is not called if the determined indicator is 
alreadv contained in the decision cache . 

18. (original): The computer-readable medium of claim 17, the method fiirther 
comprismg the steps of: providing, to the requester, access to the contents of each classified table 
element for which an approval indicator is received; and, denying, to the requestor, access to the 
contents of each classified table element for which a non-approval indicator is received from the 
classification engine, the non-approval indicator indicating that the requestor is not permitted to 
access the contents of the respective classified table element. 

19. (original): The computer-readable medium of claim 17, wherein: the classified table 
elements are included in a classified table contained in the database; each classified table element 
is associated with a respective classification label; and the classification engine uses the 
classification label for each classified table element and a classification associated with the 
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requestor in determining whether to provide the approval indicator and whether to provide the 
non-approval indicator for the respective classified table element. 

20. (original): The computer-readable medium of claim 19, wherein the classified table 
element is a classified table row. 

21. (original): The computer-readable medium of claim 20, the method further 
comprising the step of compiling the request received at the receiving step into a plurality of 
executable instructions, the executable instructions comprising added instructions for invoking 
the classification engine such that for each row of the classified table, arguments for at least one 
classification parameter are passed to the classification engine for use in generating one of tiie 
approval indicator and non-approval indicator for the respective row, where the arguments 
comprise both data stored in one or more classification colunms of the table and data used to 
determine the classification associated with the requestor. 

22. (original): The computer-readable medium of claim 21, wherein the classification 
engine is adapted to generate the indicators using a classification level derived by the 
classification engine for each row, the classification level being derived from data stored in the at 
least one classification colunm of each respective row in accordance with a column mapping 
scheme. 
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23. (original): The computer-readable medium of claim 17, wherein in the asking step, 
the classification engine is invoked through at least one processing exit in the data processing 
system. 

24. (currently amended): The computer-readable medium of claim 17, further 
comprising, before the asking step, the step of checking, for each classified table element, 
whether a -the decision cache contains one of aB -the approval indicator and non-approval 
indicator associated therewith, and wherein the asking step is performed only when neither 
indicator is contained in said decision cache. 
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